Is myworkdayjobs.com Legit? ATS Domains, Explained (2026)

Short answer: yes, myworkdayjobs.com is real. It is the domain Workday uses to host company career sites, and the same thing is true of boards.greenhouse.io, jobs.lever.co, jobs.ashbyhq.com and apply.workable.com. A job application handing you off to a domain you have never heard of is normal, not a warning sign. What matters is whether the subdomain in front of it belongs to the company you think you are applying to.

We run an auto-apply agent that opens real application forms across a dozen of these systems, so we spend a lot of time watching where apply links actually go. Here is what that routing looks like from the inside, and how to check any application link yourself in about twenty seconds.

Why the apply button sends you somewhere else

Almost no company builds its own application software. They rent an applicant tracking system, and that vendor hosts the careers page and the form. The marketing site stays on the company domain. The second you click Apply, you land on the vendor's domain with the company name tucked into the subdomain. The first time you see it, it reads like a redirect to somewhere sketchy. It is the most ordinary thing in hiring.

The pattern worth memorising is this. Company identity lives in the subdomain. Vendor identity lives in the root domain. So stripe.greenhouse.io is Stripe's board hosted on Greenhouse, and cvshealth.wd1.myworkdayjobs.com is CVS Health's tenant hosted on Workday. Neither of those is a fake. Both are exactly what a real careers page looks like once the marketing wrapper falls away.

This also explains why the branding changes mid-flow. The company controls the logo and the colours on its own site. The ATS controls the form. When those two look nothing alike, you are seeing a handoff, not a hijack.

The ATS domains you will actually see

These are the root domains behind most application forms in 2026. If a link resolves to one of them with a company subdomain, the routing is legitimate.

Workday

Workday career sites live on myworkdayjobs.com, and occasionally myworkdaysite.com. The full shape is tenant.wdN.myworkdayjobs.com, where the wd1, wd3 or wd5 fragment is just the data centre the tenant sits on. So disney.wd5.myworkdayjobs.com and pwc.wd3.myworkdayjobs.com are both real. The number means nothing about you and nothing about the job.

Greenhouse

Greenhouse boards appear as boards.greenhouse.io/company, job-boards.greenhouse.io/company, or company.greenhouse.io. There is a separate EU-hosted set on boards.eu.greenhouse.io and job-boards.eu.greenhouse.io for companies keeping applicant data inside the EU. All four shapes are the same product.

Lever and Ashby

Lever uses jobs.lever.co/company with no variation worth worrying about. Ashby uses jobs.ashbyhq.com/company, and some companies front it with their own subdomain instead, as in company.ashbyhq.com. Both are common at startups and mid-size tech companies.

Workable, SmartRecruiters and iCIMS

Workable applications run through apply.workable.com. SmartRecruiters uses careers.smartrecruiters.com and jobs.smartrecruiters.com, and its apply step sometimes hands off again to a second SmartRecruiters-owned host, which surprises people who were not expecting a third domain in one flow. iCIMS puts the employer in the subdomain of icims.com and is one of the older systems still in heavy use at large employers.

The European systems

If you are searching in Europe you will hit a different set entirely. Personio serves boards on company.jobs.personio.com, plus the .de and .eu variants. Teamtailor uses company.teamtailor.com. Recruitee uses company.recruitee.com. These barely get written about in English-language job-search advice, which is why they read as unfamiliar even though they are the default across German, Dutch and Nordic employers. We broke down how each of them behaves in our guide to European ATS platforms.

How to check an application link in twenty seconds

Run these in order. The first hard fail is enough to close the tab.

Read the root domain right to left. The last two segments before the first slash are the real host. In careers.company.myworkdayjobs.com.evil.co, the real host is evil.co, not Workday. Scammers rely on you stopping at the first familiar word you recognise.

Check that the subdomain is the actual company. A real board carries the employer name, spelled the way the employer spells it. A near-miss spelling, an extra hyphen, or a generic word like careers-portal where the company name should be is worth a second look.

Reach the same job from the company's own site. Open the employer's website directly, find their careers page, and confirm the role exists there and points at the same host. This single step defeats almost every fake-listing pattern, because a scammer can copy a job description but cannot post it on a company's real board.

Look at what the form is asking for. A real application asks for your resume, contact details, work authorization and some screening questions. At the application stage it does not need your bank details, a government ID number, a copy of your passport, or a payment for equipment or training.

Check where the message came from. If a link arrived by email or a chat app, look at the sending domain rather than the display name. A recruiter at a real company writes from that company's domain or from a recognisable ATS notification address.

What an actual scam looks like instead

The unfamiliar domain is not the tell. The sequence is. Real hiring starts with a posting and an application. Scams tend to start with contact and skip the application entirely.

The pattern that repeats: an unsolicited message about a role you never applied to, an interview conducted entirely over a chat app, an offer arriving fast and with very little scrutiny, then a request for money or bank details framed as onboarding, equipment, or a background check fee. The United States Federal Trade Commission maintains current consumer guidance on job scams and it is the primary source worth reading if something feels off. Treat the request for money as the line. No legitimate employer charges you to be hired.

Compare that to what a real ATS does. It shows you a form, it asks about your experience, and it sends you a confirmation. It never invoices you.

The redirect chain is the part worth watching

There is a second failure mode that has nothing to do with fraud. Aggregator sites republish postings they do not own, and their apply links are only as fresh as their last sync. Click one of those and you can end up on a real ATS domain looking at a role that closed weeks ago, or worse, dumped on a generic search results page because the specific job no longer exists.

Our system treats aggregator links differently from direct ATS links for exactly this reason, because the aggregator layer is where most dead ends are introduced. If an apply link lands you on a search page rather than a specific form, or on a page that says the position is no longer available, the posting is gone regardless of what the listing said. That is a close cousin of the recycled-listing problem we covered in how to spot a reposted job.

A note on the account walls

Some of these systems make you create an account before you can submit. Workday is the well-known one: each employer runs its own tenant, so an account you made for one company does not work for the next. iCIMS often adds an email verification step in the middle of the flow. This is friction, not fraud. It is also the single biggest reason people abandon an application halfway through, which we get into in our breakdown of the worst application systems.

Where AI Applyd fits

Because our agent applies through these systems directly, it works from the real form on the real host rather than an aggregator's copy of a listing. It tailors your resume and drafts a cover letter for each role, you approve every application before it sends, and it verifies that the submission actually landed instead of assuming a click worked. When it cannot confirm a submission, it marks the attempt failed and tells you why. Results vary, and no tool can make a closed role open again. AI Applyd is free to start, no card.

FAQ

Is myworkdayjobs.com a real website? Yes. It is the domain Workday uses to host employer career sites. The company name appears in the subdomain, as in disney.wd5.myworkdayjobs.com. Entering your details there is the same as applying on that employer's careers page, because it is that employer's careers page.

What does wd1 or wd5 mean in a Workday link? It identifies the data centre the employer's Workday tenant runs on. It carries no meaning for your application and is not a sign that a link has been tampered with. Different employers land on different numbers.

Is boards.greenhouse.io safe to enter my details into? It is a widely used applicant tracking system, and the subdomain plus the path identify which company's board you are on. The check worth doing is confirming the same job is linked from the employer's own careers page.

Why does one application send me through three different domains? Some systems hand off between a careers page host and an apply host, and aggregator links add another hop before you reach the ATS at all. Multiple redirects are normal. What matters is where you finish, and whether that final host carries the employer's name.

How do I know if a job application link is a scam? Read the root domain right to left, confirm the same role is reachable from the employer's own website, and check what the form asks for. Requests for money, bank details, or identity documents at the application stage are the reliable signal, not an unfamiliar domain.